Hacker News new | past | comments | ask | show | jobs | submit login

Before this update hits, please y'all techies out there- log as much network traffic as you can. Then update, then compare if you see SSL traffic that wasn't there before the update. Also compare the DNS requests before & after update. Oh, and UDP packets too. Basically, just record days worth of traffic, before and after, and upload it so people(like me?) with free time can search for anything suspicious.

EDIT: Okay, for Danieru's & verandaguy's replies to my comment[1], be sure to set in your wireshark filter "ip.addr == [IP of TV]" so we don't see anything random internet-folk are not suppose to see. That filter is traffic that is only coming from or going to the TV. Also Danieru, if your CC is flying around unencrypted in network traffic... something and/or someone has made a mistake elsewhere.

EDIT2: I'll also take this time to promote http://cloudshark.org/ , not because I have anything to do with the website. I just think it's super cool. You can upload a pcap file and it'll give you a unique url you can share with others.

EDIT3: It'd be cooler still if you could actually capture the firmware binary being downloaded to the TV!

1. http://i.imgur.com/OHJAPGH.png




Is it assumed the update will be OTA? For Sony TVs it can be put on a USB stick - which means there's a binary to reverse.


[deleted]


Are those things your TV would know about?


Why the snide remark? Was there something unreasonable about what he said?


Yes, the part where you asked people to send complete logs of their network traffic to anonymous strangers like yourself.


Is it not completely obvious to filter out other traffic that is unrelated? How verbose must one be?


... But wouldn't that alone require the data collector (e.g. whomever you're asking for the data) to sift over their logs in the first place, segregating what they know is their own traffic from something generated by a TV or other smart appliance?

Evidently, either I'm slow in understanding your reasoning, or you should be more verbose.


I have an idea, how about we delegate the job of data collecting to those who 1) have the resources to easily segregate their TV traffic from the rest of their network, or 2) don't have any problems publicizing their non-relevant traffic (because it doesn't contain anything sensitive).


You can filter your traffic with a few clicks for a specific stream/connection/device.


Sorry I did not mean to be snide, I thought smtddr was setting up the joke and relying on someone to hit the punchline. I also thought the "people like me" was part of the joke implying "identity theives like I am pretending to be".

Edit: I should also mention why I did not take his request seriously. Now that all Ethernet networks use switches and not hubs you will only see traffic involving your desktop. The exception being a laptop connected to the same wifi as the TV provided said wifi is unencrypted.

Thus in the common case if you ask a random person to log their network they will only log their own computer's traffic.


>Thus in the common case if you ask a random person to log their network they will only log their own computer's traffic.

Wrong. The common case is wifi.


The common case of hacker news readers is not unencrypted wifi.


No one said unencrypted. Also, encrypted wifi can still be captured if you know the password to your own network.

Learn something: http://ask.wireshark.org/questions/17200/sniff-wpa2-network




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: